Trojan.DownLoader11.466

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Za98920O54912' = '%HOMEPATH%\Cj59201H22277\update.exe'

Creates or modifies the following files:

%HOMEPATH%\Start Menu\Programs\Startup\lsass.exe

Malicious functions:

Creates and executes the following:

'%HOMEPATH%\Start Menu\Programs\Startup\lsass.exe'
'%HOMEPATH%\Cj59201H22277\update.exe'

Injects code into

the following system processes:

<SYSTEM32>\cmd.exe
<SYSTEM32>\cscript.exe
%WINDIR%\Explorer.EXE
<SYSTEM32>\ctfmon.exe

a large number of user processes.

Modifies file system :

Creates the following files:

%HOMEPATH%\Cj59201H22277\V56017M89557.QBW
%HOMEPATH%\Cj59201H22277\Y46609Y8227.DCJ
%HOMEPATH%\Cj59201H22277\C14286B82406.SSU
%HOMEPATH%\Cj59201H22277\W86044E52346.SQF
%HOMEPATH%\Cj59201H22277\80287.HVR
%HOMEPATH%\Cj59201H22277\39181.ICE
%HOMEPATH%\Cj59201H22277\79410.DYK
%HOMEPATH%\Cj59201H22277\62896.LOU
%HOMEPATH%\Cj59201H22277\A2055U98002.KGT
%HOMEPATH%\Cj59201H22277\F46919T41009.RMB
%HOMEPATH%\Cj59201H22277\39142.APG
%HOMEPATH%\Cj59201H22277\N66767T27115.CVN
%HOMEPATH%\Cj59201H22277\20407.EMC
%HOMEPATH%\Cj59201H22277\Y25465J66312.VLK
%HOMEPATH%\Cj59201H22277\15065.RNJ
%HOMEPATH%\Cj59201H22277\L21986L37662.BEK
%HOMEPATH%\Cj59201H22277\9259.RGL
%HOMEPATH%\Cj59201H22277\U19078P9770.XIM
%HOMEPATH%\Cj59201H22277\Y73288R14665.MHU
%HOMEPATH%\Cj59201H22277\82579.MLO
%HOMEPATH%\Cj59201H22277\M92180J57957.FQJ
%HOMEPATH%\Cj59201H22277\N34516B48205.GNR
%HOMEPATH%\Cj59201H22277\W18097P35449.CNY
%HOMEPATH%\Cj59201H22277\98490.UDW
%HOMEPATH%\Cj59201H22277\49648.SIF
%HOMEPATH%\Cj59201H22277\28350.PIW
%HOMEPATH%\Cj59201H22277\96359.CZN
%HOMEPATH%\Cj59201H22277\65266.OLE
%HOMEPATH%\Cj59201H22277\42859.TBA
%HOMEPATH%\Cj59201H22277\L35619L77472.RCH
%HOMEPATH%\Cj59201H22277\W96905L75854.XBH
%HOMEPATH%\Cj59201H22277\S88155A77320.RLY
%HOMEPATH%\Cj59201H22277\68203.NDV
%HOMEPATH%\Cj59201H22277\31061.XUF
%HOMEPATH%\Cj59201H22277\24036.PKS
%HOMEPATH%\Cj59201H22277\2144.IGT
%HOMEPATH%\Cj59201H22277\89045.TPB
%HOMEPATH%\Cj59201H22277\58708.SXB
%HOMEPATH%\Cj59201H22277\7903.FOC
%HOMEPATH%\Cj59201H22277\K49964A96140.DSB
%HOMEPATH%\Cj59201H22277\H60084V2308.XCN
%HOMEPATH%\Cj59201H22277\Z60396L3304.PIT
%HOMEPATH%\Cj59201H22277\X24611G45432.RRE
%HOMEPATH%\Cj59201H22277\70439.IFK
%HOMEPATH%\Cj59201H22277\81154.IEL
%HOMEPATH%\Cj59201H22277\55630.PDJ
%HOMEPATH%\Cj59201H22277\82178.QKG
%HOMEPATH%\Cj59201H22277\Q42442W44112.SVO
%HOMEPATH%\Cj59201H22277\57521.TPZ
%HOMEPATH%\Cj59201H22277\60521.BQP
%HOMEPATH%\Cj59201H22277\V22689U8147.OMT
%HOMEPATH%\Cj59201H22277\C4366B80148.WTJ
%HOMEPATH%\Cj59201H22277\B24824B78289.PVJ
%HOMEPATH%\Cj59201H22277\J69785Q62181.JNI
%HOMEPATH%\Cj59201H22277\R75080F20869.LZV
%HOMEPATH%\Cj59201H22277\12614.KOO
%HOMEPATH%\Cj59201H22277\S53899V59668.CZH
%HOMEPATH%\Cj59201H22277\46132.CZN
%HOMEPATH%\Cj59201H22277\15957.MGM
%HOMEPATH%\Cj59201H22277\I91035P68056.NUI
%HOMEPATH%\Cj59201H22277\56555.SPY
%HOMEPATH%\Cj59201H22277\E26290Z27642.HER
%HOMEPATH%\Cj59201H22277\50556.IDC
%HOMEPATH%\Cj59201H22277\79023.RFQ
%HOMEPATH%\Cj59201H22277\N62467R25259.RYD
%HOMEPATH%\Cj59201H22277\H75446D41797.RUO
%HOMEPATH%\Cj59201H22277\I65358X31977.SUI
%HOMEPATH%\Cj59201H22277\U76380S20698.MKZ
%HOMEPATH%\Cj59201H22277\Z80396G58320.FMF
%HOMEPATH%\Cj59201H22277\B61741H73840.WNZ
%HOMEPATH%\Cj59201H22277\4974.RPP
%HOMEPATH%\Cj59201H22277\T63392L72938.KRH
%HOMEPATH%\Cj59201H22277\23767.OWP
%HOMEPATH%\Cj59201H22277\V33860W39430.LQT
%HOMEPATH%\Cj59201H22277\78940.GAJ
%HOMEPATH%\Cj59201H22277\99467.IYC
%HOMEPATH%\Cj59201H22277\R38995F13293.ZRU
%HOMEPATH%\Cj59201H22277\L40529A75086.UGR
%HOMEPATH%\Cj59201H22277\94621.IZU
%HOMEPATH%\Cj59201H22277\D4881L85374.KIB
%HOMEPATH%\Cj59201H22277\38383.NWP
%HOMEPATH%\Cj59201H22277\83730.SXZ
%HOMEPATH%\Cj59201H22277\O71885Z29070.UZW
%HOMEPATH%\Cj59201H22277\23085.WCW
%HOMEPATH%\Cj59201H22277\74052.QPI
%HOMEPATH%\Cj59201H22277\R99234R28261.TEK
%HOMEPATH%\Cj59201H22277\H6239R79040.FGZ
%HOMEPATH%\Cj59201H22277\38215.NJQ
%HOMEPATH%\Cj59201H22277\V85945T19407.KJY
%HOMEPATH%\Cj59201H22277\Z54214K78014.AUC
%HOMEPATH%\Cj59201H22277\73064.XKO
%HOMEPATH%\Cj59201H22277\73746.EMJ
%HOMEPATH%\Cj59201H22277\97870.UBT
%HOMEPATH%\Cj59201H22277\V12456Q42082.XMK
%HOMEPATH%\Cj59201H22277\98890.XRK
%HOMEPATH%\Cj59201H22277\11124.ZNH
%HOMEPATH%\Cj59201H22277\13824.OLT
%HOMEPATH%\Cj59201H22277\Q55794A30443.YJZ
%HOMEPATH%\Cj59201H22277\W51604S20654.RGN
%HOMEPATH%\Cj59201H22277\46042.DZQ
%HOMEPATH%\Cj59201H22277\50326.KPF
%HOMEPATH%\Cj59201H22277\A95614S9374.VIV
%HOMEPATH%\Cj59201H22277\H44683V29708.OMW
%HOMEPATH%\Cj59201H22277\34856.AIU
%HOMEPATH%\Cj59201H22277\Y45687P90400.PHR
%HOMEPATH%\Cj59201H22277\Y5166F93706.QWF
%HOMEPATH%\Cj59201H22277\E63139Z68565.WUT
%HOMEPATH%\Cj59201H22277\X82088P32972.XGK
%HOMEPATH%\Cj59201H22277\11788.SRZ
%HOMEPATH%\Cj59201H22277\R40234F82066.BDV
%HOMEPATH%\Cj59201H22277\41747.MOO
%HOMEPATH%\Cj59201H22277\S14938Q38161.KTG
%HOMEPATH%\Cj59201H22277\E56634D32180.XGQ
%HOMEPATH%\Cj59201H22277\L95112B92850.QVX
%HOMEPATH%\Cj59201H22277\Y96280W75563.WJE
%HOMEPATH%\Cj59201H22277\H32901Q83306.ZUL
%HOMEPATH%\Cj59201H22277\54431.XTC
%HOMEPATH%\Cj59201H22277\11176.QWY
%HOMEPATH%\Cj59201H22277\D12294N34544.WCK
%HOMEPATH%\Cj59201H22277\Y52154N78219.VPD
%HOMEPATH%\Cj59201H22277\55219.WIG
%HOMEPATH%\Cj59201H22277\O51161W17768.MOF
%HOMEPATH%\Cj59201H22277\77225.WXB
%HOMEPATH%\Cj59201H22277\N45943V63166.GIV
%HOMEPATH%\Cj59201H22277\81317.ALX
%HOMEPATH%\Cj59201H22277\M50893W59982.PND
%HOMEPATH%\Cj59201H22277\64871.ROF
%HOMEPATH%\Cj59201H22277\96139.OND
%HOMEPATH%\Cj59201H22277\Q17476R53279.TMO
%HOMEPATH%\Cj59201H22277\30645.MYA
%HOMEPATH%\Cj59201H22277\P23813H17083.BHW
%HOMEPATH%\Cj59201H22277\N24507A56716.ZWF
%HOMEPATH%\Cj59201H22277\T97690T27897.RZN
%HOMEPATH%\Cj59201H22277\Y15262J83350.PUQ
%HOMEPATH%\Cj59201H22277\71342.GVW
%HOMEPATH%\Cj59201H22277\A89645E87641.GIY
%HOMEPATH%\Cj59201H22277\52505.YBI
%HOMEPATH%\Cj59201H22277\J98433X78573.YDX
%HOMEPATH%\Cj59201H22277\42427.NMH
%HOMEPATH%\Cj59201H22277\47830.RGA
%HOMEPATH%\Cj59201H22277\S53576U13520.DSL
%HOMEPATH%\Cj59201H22277\29391.NEW
%HOMEPATH%\Cj59201H22277\O62346D14748.MAT
%HOMEPATH%\Cj59201H22277\I19951T17282.QFW
%HOMEPATH%\Cj59201H22277\V72544W94794.ENB
%HOMEPATH%\Cj59201H22277\N62484S81313.UUA
%HOMEPATH%\Cj59201H22277\7746.JGH
%HOMEPATH%\Cj59201H22277\G30380H88855.BXC
%HOMEPATH%\Cj59201H22277\8543.KAS
%HOMEPATH%\Cj59201H22277\79094.ODU
%HOMEPATH%\Cj59201H22277\T86699P1227.TBF
%HOMEPATH%\Cj59201H22277\Z72822K86132.QRH
%HOMEPATH%\Cj59201H22277\I96222S88958.QQY
%HOMEPATH%\Cj59201H22277\64977.NPR
%HOMEPATH%\Cj59201H22277\59477.RGD
%HOMEPATH%\Cj59201H22277\38538.IHY
%HOMEPATH%\Cj59201H22277\J81710V15358.UTZ
%HOMEPATH%\Cj59201H22277\U2073M80211.NEG
%HOMEPATH%\Cj59201H22277\14947.SMT
%HOMEPATH%\Cj59201H22277\P6187M21733.KYJ
%HOMEPATH%\Cj59201H22277\U73860F91281.YQK
%HOMEPATH%\Cj59201H22277\F33830D16625.WDD
%HOMEPATH%\Cj59201H22277\U20015Z7716.PRJ
%HOMEPATH%\Cj59201H22277\73460.BPK
%HOMEPATH%\Cj59201H22277\99346.WOY
%HOMEPATH%\Cj59201H22277\82408.CJO
%HOMEPATH%\Cj59201H22277\39092.RBJ
%HOMEPATH%\Cj59201H22277\81169.JWH
%HOMEPATH%\Cj59201H22277\F35809J20771.SUR
%HOMEPATH%\Cj59201H22277\96521.DDS
%HOMEPATH%\Cj59201H22277\C53482Z40586.JVV
%HOMEPATH%\Cj59201H22277\3456.FMI
%HOMEPATH%\Cj59201H22277\50564.LIH
%TEMP%\aut2.tmp
%HOMEPATH%\Ho49315E39093.WG2
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\index[1].htm
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].htm
%HOMEPATH%\Cj59201H22277\HI.TEY
%HOMEPATH%\Cj59201H22277\B48234C63104.LWF
%TEMP%\aut1.tmp
%HOMEPATH%\Zj84862H85855.txt
%HOMEPATH%\Cj59201H22277\95640.NNM
%HOMEPATH%\Cj59201H22277\33782.CHH
%HOMEPATH%\Cj59201H22277\49310.LTL
%HOMEPATH%\Cj59201H22277\S31034C2972.VOI
%HOMEPATH%\Cj59201H22277\I63691U57406.WCE
%HOMEPATH%\Cj59201H22277\N6733L43836.EDL
%HOMEPATH%\Cj59201H22277\T91149B35820.DBD
%HOMEPATH%\Cj59201H22277\7663.LDZ
%HOMEPATH%\Cj59201H22277\N59256B79992.PKO
%HOMEPATH%\Cj59201H22277\X95069L20309.UAT
%HOMEPATH%\Cj59201H22277\B15893X7134.QYE
%HOMEPATH%\Cj59201H22277\O98197Q67692.UNG
%HOMEPATH%\Cj59201H22277\61536.DGX
%HOMEPATH%\Cj59201H22277\74659.IWX
%HOMEPATH%\Cj59201H22277\48375.KGQ
%HOMEPATH%\Cj59201H22277\75270.YZT
%HOMEPATH%\Cj59201H22277\N36781A97167.NSW
%HOMEPATH%\Cj59201H22277\73467.MXY
%HOMEPATH%\Cj59201H22277\11169.HHM
%HOMEPATH%\Cj59201H22277\56414.ETZ
%HOMEPATH%\Cj59201H22277\93863.UJJ
%HOMEPATH%\Cj59201H22277\56602.ABN
%HOMEPATH%\Cj59201H22277\B73843O67579.NVH
%HOMEPATH%\Cj59201H22277\X77481W93854.QII
%HOMEPATH%\Cj59201H22277\12292.VVG
%HOMEPATH%\Cj59201H22277\5546.EBQ
%HOMEPATH%\Cj59201H22277\31731.UEO
%HOMEPATH%\Cj59201H22277\K21484J29165.BAF
%HOMEPATH%\Cj59201H22277\G36055F20684.ONK
%HOMEPATH%\Cj59201H22277\W8239M86745.ULO
%HOMEPATH%\Cj59201H22277\V53773X83824.VYN
%HOMEPATH%\Cj59201H22277\17491.VAP
%HOMEPATH%\Cj59201H22277\79358.FWB
%HOMEPATH%\Cj59201H22277\S91276N96565.DUI
%HOMEPATH%\Cj59201H22277\88489.ODC
%HOMEPATH%\Cj59201H22277\S27847J10012.NUR
%HOMEPATH%\Cj59201H22277\24161.NOS
%HOMEPATH%\Cj59201H22277\F27187K13981.JZN
%HOMEPATH%\Cj59201H22277\U96036Q20407.RDL
%HOMEPATH%\Cj59201H22277\38787.JXQ
%HOMEPATH%\Cj59201H22277\V4401D22070.YSA
%HOMEPATH%\Cj59201H22277\53971.AAW
%HOMEPATH%\Cj59201H22277\L81519N45570.QOT
%HOMEPATH%\Cj59201H22277\N34097J68287.JHA
%HOMEPATH%\Cj59201H22277\H19236N1310.LJA
%HOMEPATH%\Cj59201H22277\W56148W12819.GZP
%HOMEPATH%\Cj59201H22277\L60021U27680.KFH
%HOMEPATH%\Cj59201H22277\O60007H84579.ZIZ
%HOMEPATH%\Cj59201H22277\J75088U63019.ERG
%HOMEPATH%\Cj59201H22277\N73672G34950.RHF
%HOMEPATH%\Cj59201H22277\63967.VRK
%HOMEPATH%\Cj59201H22277\W19171R85215.GVR
%HOMEPATH%\Cj59201H22277\I82593Q68231.RYS
%HOMEPATH%\Cj59201H22277\24779.EZW
%HOMEPATH%\Cj59201H22277\C23314R33447.HIG
%HOMEPATH%\Cj59201H22277\X99323B73216.DCB
%HOMEPATH%\Cj59201H22277\G99819A92102.OXL
%HOMEPATH%\Cj59201H22277\S74902Y24269.SMW
%HOMEPATH%\Cj59201H22277\X25098I40022.VNC
%HOMEPATH%\Cj59201H22277\R43724D58866.QPD
%HOMEPATH%\Cj59201H22277\13138.JDR
%HOMEPATH%\Cj59201H22277\92499.YYZ
%HOMEPATH%\Cj59201H22277\46288.DDO
%HOMEPATH%\Cj59201H22277\X56526O82275.FYC
%HOMEPATH%\Cj59201H22277\32522.MVP
%HOMEPATH%\Cj59201H22277\Q77278W70338.JAY
%HOMEPATH%\Cj59201H22277\J91747K12992.QLJ
%HOMEPATH%\Cj59201H22277\30522.JWV
%HOMEPATH%\Cj59201H22277\73194.IRN
%HOMEPATH%\Cj59201H22277\32431.HYA
%HOMEPATH%\Cj59201H22277\48733.AFE
%HOMEPATH%\Cj59201H22277\X32577E68619.NTN
%HOMEPATH%\Cj59201H22277\F9676V31627.FAE
%HOMEPATH%\Cj59201H22277\89139.SGP
%HOMEPATH%\Cj59201H22277\V45071F10679.WFO
%HOMEPATH%\Cj59201H22277\T86274U32061.FPH
%HOMEPATH%\Cj59201H22277\K55554U20948.FKC
%HOMEPATH%\Cj59201H22277\H29544J76191.TVM
%HOMEPATH%\Cj59201H22277\N98309Y63694.OHX
%HOMEPATH%\Cj59201H22277\Y21381X44340.MBL
%HOMEPATH%\Cj59201H22277\R24663D4338.EFS
%HOMEPATH%\Cj59201H22277\L43417R24532.DSL
%HOMEPATH%\Cj59201H22277\E30659N34383.BKN
%HOMEPATH%\Cj59201H22277\X5206X43882.WKJ
%HOMEPATH%\Cj59201H22277\58117.LVI
%HOMEPATH%\Cj59201H22277\85049.HKV
%HOMEPATH%\Cj59201H22277\W56013C84783.VXM
%HOMEPATH%\Cj59201H22277\D70633N34426.BBE
%HOMEPATH%\Cj59201H22277\G14928V7066.SNK
%HOMEPATH%\Cj59201H22277\F57102R97927.XFY
%HOMEPATH%\Cj59201H22277\85338.PAL
%HOMEPATH%\Cj59201H22277\Y29357L58205.OJC
%HOMEPATH%\Cj59201H22277\V7858V11045.PAR
%HOMEPATH%\Cj59201H22277\R77871L96844.BFM
%HOMEPATH%\Cj59201H22277\34893.ZDL
%HOMEPATH%\Cj59201H22277\P47805O56986.FAX
%HOMEPATH%\Cj59201H22277\J11115X95939.CRL
%HOMEPATH%\Cj59201H22277\87598.SAQ
%HOMEPATH%\Cj59201H22277\X41588H5056.GHN
%HOMEPATH%\Cj59201H22277\80923.XWJ
%HOMEPATH%\Cj59201H22277\R1701B41246.FGA
%HOMEPATH%\Cj59201H22277\63702.TLJ
%HOMEPATH%\Cj59201H22277\87029.BNU
%HOMEPATH%\Cj59201H22277\I31340I31860.CRP
%HOMEPATH%\Cj59201H22277\15311.XHM
%HOMEPATH%\Cj59201H22277\3974.PKL
%HOMEPATH%\Cj59201H22277\59159.KCM
%HOMEPATH%\Cj59201H22277\T37913N56361.XYM
%HOMEPATH%\Cj59201H22277\59203.BIU
%HOMEPATH%\Cj59201H22277\D98768P37322.MIK
%HOMEPATH%\Cj59201H22277\13589.QEK
%HOMEPATH%\Cj59201H22277\V18187P55415.UVY
%HOMEPATH%\Cj59201H22277\97893.UPI
%HOMEPATH%\Cj59201H22277\77845.ETC
%HOMEPATH%\Cj59201H22277\N27486N90593.BXV
%HOMEPATH%\Cj59201H22277\E22731L80635.FLS
%HOMEPATH%\Cj59201H22277\63322.UDR
%HOMEPATH%\Cj59201H22277\23215.TKG
%HOMEPATH%\Cj59201H22277\40033.VPU
%HOMEPATH%\Cj59201H22277\L4133Q60505.WWP
%HOMEPATH%\Cj59201H22277\65511.GMH
%HOMEPATH%\Cj59201H22277\B58441I14083.TXY
%HOMEPATH%\Cj59201H22277\I79762B22547.COQ
%HOMEPATH%\Cj59201H22277\76221.UZV
%HOMEPATH%\Cj59201H22277\88616.NHD
%HOMEPATH%\Cj59201H22277\T80264R6712.SFD
%HOMEPATH%\Cj59201H22277\D42255M18533.DIQ
%HOMEPATH%\Cj59201H22277\M92489D2737.RTB
%HOMEPATH%\Cj59201H22277\2433.OPP
%HOMEPATH%\Cj59201H22277\42713.XNR
%HOMEPATH%\Cj59201H22277\R81245G86699.GKG
%HOMEPATH%\Cj59201H22277\F51426E93904.UUB
%HOMEPATH%\Cj59201H22277\F59028H66292.BYQ
%HOMEPATH%\Cj59201H22277\E52052F6374.IZD
%HOMEPATH%\Cj59201H22277\S62184O68265.KZG
%HOMEPATH%\Cj59201H22277\V93926H91531.RFH
%HOMEPATH%\Cj59201H22277\30211.QOT
%HOMEPATH%\Cj59201H22277\I31704Q79073.DTW
%HOMEPATH%\Cj59201H22277\J99306T33882.TLH
%HOMEPATH%\Cj59201H22277\36774.MJH
%HOMEPATH%\Cj59201H22277\Q90631Y54268.WFE
%HOMEPATH%\Cj59201H22277\58177.JDV
%HOMEPATH%\Cj59201H22277\E96705U11941.BJU
%HOMEPATH%\Cj59201H22277\O59967Y87346.JBK
%HOMEPATH%\Cj59201H22277\G70495J80535.ORF
%HOMEPATH%\Cj59201H22277\1018.LOO
%HOMEPATH%\Cj59201H22277\99329.UIQ
%HOMEPATH%\Cj59201H22277\B38477V45944.TMV
%HOMEPATH%\Cj59201H22277\90703.INF
%HOMEPATH%\Cj59201H22277\77663.ULA
%HOMEPATH%\Cj59201H22277\W14878A48845.ZVZ
%HOMEPATH%\Cj59201H22277\H64435N29913.QUJ
%HOMEPATH%\Cj59201H22277\94588.TMY
%HOMEPATH%\Cj59201H22277\82497.XXB
%HOMEPATH%\Cj59201H22277\41260.XHO
%HOMEPATH%\Cj59201H22277\67882.WUS
%HOMEPATH%\Cj59201H22277\93360.AVV
%HOMEPATH%\Cj59201H22277\T17231M67105.OMC
%HOMEPATH%\Cj59201H22277\K66422X58712.IEG
%HOMEPATH%\Cj59201H22277\34651.FTP
%HOMEPATH%\Cj59201H22277\64666.OYI
%HOMEPATH%\Cj59201H22277\A43256M63288.PGH
%HOMEPATH%\Cj59201H22277\L74445Q34148.UBT
%HOMEPATH%\Cj59201H22277\N60210X2692.PLX
%HOMEPATH%\Cj59201H22277\F8091I7291.MEN
%HOMEPATH%\Cj59201H22277\67950.ZUB
%HOMEPATH%\Cj59201H22277\G14153Y60225.GDN
%HOMEPATH%\Cj59201H22277\96063.FWR
%HOMEPATH%\Cj59201H22277\58574.YTO
%HOMEPATH%\Cj59201H22277\C44493U27162.RIR
%HOMEPATH%\Cj59201H22277\M81024G54635.XAP
%HOMEPATH%\Cj59201H22277\update.exe
%HOMEPATH%\Cj59201H22277\78718.XOP
%HOMEPATH%\Cj59201H22277\15754.VIO
%HOMEPATH%\Cj59201H22277\98249.QBL
%HOMEPATH%\Cj59201H22277\Z36543T59691.DMT
%HOMEPATH%\Cj59201H22277\C23814Z77989.SQC
%HOMEPATH%\Cj59201H22277\A81483T82883.KKG
%HOMEPATH%\Cj59201H22277\65783.DFA
%HOMEPATH%\Cj59201H22277\94501.KQS
%HOMEPATH%\Cj59201H22277\4221.XCJ
%HOMEPATH%\Cj59201H22277\B34978U9345.MZH
%HOMEPATH%\Cj59201H22277\D51531F43727.JOV
%HOMEPATH%\Cj59201H22277\28323.ZWU
%HOMEPATH%\Cj59201H22277\V47644F97446.HWQ
%HOMEPATH%\Cj59201H22277\S60528O84307.EEX
%HOMEPATH%\Cj59201H22277\X65001O29015.WHU
%HOMEPATH%\Cj59201H22277\30569.DLV
%HOMEPATH%\Cj59201H22277\38031.SPO
%HOMEPATH%\Cj59201H22277\81460.NPK
%HOMEPATH%\Cj59201H22277\Q98095G11259.GHG
%HOMEPATH%\Cj59201H22277\70752.VHD
%HOMEPATH%\Cj59201H22277\C50876Z88957.ZWQ
%HOMEPATH%\Cj59201H22277\81533.EBD
%HOMEPATH%\Cj59201H22277\J88537X5475.KXI
%HOMEPATH%\Cj59201H22277\I52564E50904.TOE
%HOMEPATH%\Cj59201H22277\E59280N11872.PFL
%HOMEPATH%\Cj59201H22277\A91155W39079.CFB
%HOMEPATH%\Cj59201H22277\Q82295I81412.AAA
%HOMEPATH%\Cj59201H22277\N2420Q85144.MDV
%HOMEPATH%\Cj59201H22277\83940.XLK
%HOMEPATH%\Cj59201H22277\87101.WGW
%HOMEPATH%\Cj59201H22277\S28814T57918.DLW
%HOMEPATH%\Cj59201H22277\74539.WFG
%HOMEPATH%\Cj59201H22277\37340.SRO
%HOMEPATH%\Cj59201H22277\E11075T22326.JZV
%HOMEPATH%\Cj59201H22277\O96374J69640.ITS
%HOMEPATH%\Cj59201H22277\32052.RLX
%HOMEPATH%\Cj59201H22277\39532.KXR
%HOMEPATH%\Cj59201H22277\58229.AMH
%HOMEPATH%\Cj59201H22277\V6984J97837.ZLZ
%HOMEPATH%\Cj59201H22277\I51091R80986.RIM
%HOMEPATH%\Cj59201H22277\56576.IOA
%HOMEPATH%\Cj59201H22277\75839.SZT
%HOMEPATH%\Cj59201H22277\6579.LJB
%HOMEPATH%\Cj59201H22277\66373.JUA
%HOMEPATH%\Cj59201H22277\U33654T19150.NGE
%HOMEPATH%\Cj59201H22277\H70123K70221.MZH
%HOMEPATH%\Cj59201H22277\39963.YUJ
%HOMEPATH%\Cj59201H22277\57524.LUM
%HOMEPATH%\Cj59201H22277\84073.ZCY
%HOMEPATH%\Cj59201H22277\F45638C30243.QTL
%HOMEPATH%\Cj59201H22277\L8442D38979.MJG
%HOMEPATH%\Cj59201H22277\11204.HTZ
%HOMEPATH%\Cj59201H22277\U79707D54394.VAV
%HOMEPATH%\Cj59201H22277\I23204Y34473.JJQ
%HOMEPATH%\Cj59201H22277\20699.IOW
%HOMEPATH%\Cj59201H22277\C59134X10077.XRJ
%HOMEPATH%\Cj59201H22277\Q59100H8078.OAF
%HOMEPATH%\Cj59201H22277\98074.VNA
%HOMEPATH%\Cj59201H22277\50188.MFS
%HOMEPATH%\Cj59201H22277\X47399J42457.XSA
%HOMEPATH%\Cj59201H22277\59637.JPI
%HOMEPATH%\Cj59201H22277\18107.OSA
%HOMEPATH%\Cj59201H22277\7478.MZL
%HOMEPATH%\Cj59201H22277\Z51380N33922.EAB
%HOMEPATH%\Cj59201H22277\51381.ZRH
%HOMEPATH%\Cj59201H22277\48416.ZZO
%HOMEPATH%\Cj59201H22277\Y86839A84039.RIN
%HOMEPATH%\Cj59201H22277\35583.DQZ
%HOMEPATH%\Cj59201H22277\85607.DKT
%HOMEPATH%\Cj59201H22277\N45371X82771.WWI
%HOMEPATH%\Cj59201H22277\71432.YKO
%HOMEPATH%\Cj59201H22277\6528.FGK
%HOMEPATH%\Cj59201H22277\20587.XLQ
%HOMEPATH%\Cj59201H22277\P12958R70100.YPS
%HOMEPATH%\Cj59201H22277\L43992Z47525.KPJ
%HOMEPATH%\Cj59201H22277\1654.GNU
%HOMEPATH%\Cj59201H22277\99494.LQG
%HOMEPATH%\Cj59201H22277\D91174L2647.UTI
%HOMEPATH%\Cj59201H22277\26813.TBG
%HOMEPATH%\Cj59201H22277\B30352C98304.OQY
%HOMEPATH%\Cj59201H22277\28694.NUP
%HOMEPATH%\Cj59201H22277\98733.TGL
%HOMEPATH%\Cj59201H22277\77431.MRB
%HOMEPATH%\Cj59201H22277\E27046E16857.IDF
%HOMEPATH%\Cj59201H22277\22722.OTQ
%HOMEPATH%\Cj59201H22277\31936.OUG
%HOMEPATH%\Cj59201H22277\91717.FPO
%HOMEPATH%\Cj59201H22277\Y8865J58510.TIH
%HOMEPATH%\Cj59201H22277\G93831R10669.UHP
%HOMEPATH%\Cj59201H22277\Q50092J38208.CTH
%HOMEPATH%\Cj59201H22277\28395.GXL
%HOMEPATH%\Cj59201H22277\53725.SLY
%HOMEPATH%\Cj59201H22277\E70124Z71986.BIM
%HOMEPATH%\Cj59201H22277\P64503F1870.QNA
%HOMEPATH%\Cj59201H22277\M10672Q35043.JVL
%HOMEPATH%\Cj59201H22277\I46176W91868.YKD
%HOMEPATH%\Cj59201H22277\N22677A96715.EYY
%HOMEPATH%\Cj59201H22277\52781.GYX
%HOMEPATH%\Cj59201H22277\J34048P62474.HKZ
%HOMEPATH%\Cj59201H22277\M70145X81027.LLF
%HOMEPATH%\Cj59201H22277\S40528X14674.PKH
%HOMEPATH%\Cj59201H22277\26013.JQG
%HOMEPATH%\Cj59201H22277\O29079N35811.IWL
%HOMEPATH%\Cj59201H22277\31298.ICV
%HOMEPATH%\Cj59201H22277\N82628G78158.AWB
%HOMEPATH%\Cj59201H22277\24077.HLY
%HOMEPATH%\Cj59201H22277\39849.VEF
%HOMEPATH%\Cj59201H22277\6989.NMM
%HOMEPATH%\Cj59201H22277\62518.VNI
%HOMEPATH%\Cj59201H22277\83272.ABM
%HOMEPATH%\Cj59201H22277\90153.YAP
%HOMEPATH%\Cj59201H22277\76019.WLG
%HOMEPATH%\Cj59201H22277\Y79931M72546.SJF
%HOMEPATH%\Cj59201H22277\2697.AIK
%HOMEPATH%\Cj59201H22277\89705.QOD
%HOMEPATH%\Cj59201H22277\P96111T64462.NXQ
%HOMEPATH%\Cj59201H22277\H35903E83752.UEV
%HOMEPATH%\Cj59201H22277\C94835I50739.PRJ
%HOMEPATH%\Cj59201H22277\37629.VIB
%HOMEPATH%\Cj59201H22277\A81021X1230.GRA
%HOMEPATH%\Cj59201H22277\8377.KRM
%HOMEPATH%\Cj59201H22277\D88439Z96048.SIP
%HOMEPATH%\Cj59201H22277\M18528P34720.YYB
%HOMEPATH%\Cj59201H22277\D46786E91471.YTP
%HOMEPATH%\Cj59201H22277\34770.XYY
%HOMEPATH%\Cj59201H22277\15583.DQS
%HOMEPATH%\Cj59201H22277\A81424I62722.GDS
%HOMEPATH%\Cj59201H22277\K67391B8196.MYA
%HOMEPATH%\Cj59201H22277\H50230O62683.ENX
%HOMEPATH%\Cj59201H22277\V99015S63021.MFP
%HOMEPATH%\Cj59201H22277\B14592Z4765.SNJ
%HOMEPATH%\Cj59201H22277\16845.ITP
%HOMEPATH%\Cj59201H22277\20835.BEI
%HOMEPATH%\Cj59201H22277\S29017G22896.VGP
%HOMEPATH%\Cj59201H22277\W77811O18304.TWG
%HOMEPATH%\Cj59201H22277\1497.KUT
%HOMEPATH%\Cj59201H22277\98951.LQN
%HOMEPATH%\Cj59201H22277\V54632V64122.HRA
%HOMEPATH%\Cj59201H22277\N8664R40292.HWD
%HOMEPATH%\Cj59201H22277\J89401T79531.WVN
%HOMEPATH%\Cj59201H22277\51110.LTV
%HOMEPATH%\Cj59201H22277\7258.UVN
%HOMEPATH%\Cj59201H22277\34088.KVP
%HOMEPATH%\Cj59201H22277\J97688U48350.JFZ
%HOMEPATH%\Cj59201H22277\P98243D20383.GYH
%HOMEPATH%\Cj59201H22277\X66731K79272.NBI
%HOMEPATH%\Cj59201H22277\B14224N81756.YUO
%HOMEPATH%\Cj59201H22277\Z9613F66677.SOS
%HOMEPATH%\Cj59201H22277\A33640I59723.HGL
%HOMEPATH%\Cj59201H22277\69907.PHO
%HOMEPATH%\Cj59201H22277\A15908O91892.JLT
%HOMEPATH%\Cj59201H22277\5822.FZP
%HOMEPATH%\Cj59201H22277\6163.SXM
%HOMEPATH%\Cj59201H22277\Q31380S29418.DST
%HOMEPATH%\Cj59201H22277\G47114L11218.SHX
%HOMEPATH%\Cj59201H22277\C91010T48412.KBA
%HOMEPATH%\Cj59201H22277\W50513S36717.BTJ
%HOMEPATH%\Cj59201H22277\70657.BQR
%HOMEPATH%\Cj59201H22277\B44722Y75403.ZEC
%HOMEPATH%\Cj59201H22277\83863.QOG
%HOMEPATH%\Cj59201H22277\I64762N95173.QWI
%HOMEPATH%\Cj59201H22277\28470.MFP
%HOMEPATH%\Cj59201H22277\83731.AGE
%HOMEPATH%\Cj59201H22277\T14872Z28777.LUN
%HOMEPATH%\Cj59201H22277\M51378T23489.KRP
%HOMEPATH%\Cj59201H22277\Z39701P12513.MLY
%HOMEPATH%\Cj59201H22277\51124.UXY
%HOMEPATH%\Cj59201H22277\10758.NRK
%HOMEPATH%\Cj59201H22277\L76862H33131.WRI
%HOMEPATH%\Cj59201H22277\18785.PFX
%HOMEPATH%\Cj59201H22277\72642.JNL
%HOMEPATH%\Cj59201H22277\Z54373A65946.UMG
%HOMEPATH%\Cj59201H22277\1248.FJY
%HOMEPATH%\Cj59201H22277\M26542N1161.PUO
%HOMEPATH%\Cj59201H22277\84431.QWC

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\Ho49315E39093.WG2
%HOMEPATH%\Zj84862H85855.txt

Deletes the following files:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].htm
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\index[1].htm
%TEMP%\aut2.tmp
%TEMP%\aut1.tmp
%HOMEPATH%\Ho49315E39093.WG2

Network activity:

Connects to:

'94.##2.59.206':80

Miscellaneous:

Searches for the following windows:

ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial